Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NNW5dTQoQNUyBZhrYRtpQPvb924.roa
File: NNW5dTQoQNUyBZhrYRtpQPvb924.roa (raw, json)
Hash identifier: x7I+gNQOmZ9HyFIflJ9VRM8IFgBW40/soxGN0BfZGTM=
Subject key identifier: 34:D5:B9:75:34:28:40:D5:32:05:98:6B:61:1B:69:40:FB:DB:F7:6E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198EB4BD636A39897EC8A5D3C21B201DFDF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NNW5dTQoQNUyBZhrYRtpQPvb924.roa
Signing time: Wed 27 Aug 2025 11:31:12 +0000
ROA not before: Wed 27 Aug 2025 11:31:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138888
IP address blocks: 151.242.54.0/24 maxlen: 24
151.242.96.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.244.16.0/21 maxlen: 24
151.244.168.0/23 maxlen: 24
151.244.216.0/23 maxlen: 24
151.244.218.0/24 maxlen: 24
151.244.236.0/24 maxlen: 24
151.244.248.0/23 maxlen: 24
151.246.48.0/21 maxlen: 24
151.246.56.0/21 maxlen: 24
151.246.80.0/21 maxlen: 24
151.246.88.0/21 maxlen: 24
151.246.96.0/21 maxlen: 24
151.246.104.0/21 maxlen: 24
151.246.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:4b:d6:36:a3:98:97:ec:8a:5d:3c:21:b2:01:df:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 11:31:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34d5b975342840d53205986b611b6940fbdbf76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:31:a6:d4:f6:95:9e:de:26:db:fc:c1:91:
d1:1b:14:e5:a9:8d:d0:66:b9:99:94:01:0d:45:df:
48:0b:f6:82:41:79:a1:14:ab:f3:d0:7f:a6:31:e6:
9c:fa:94:d4:39:b8:83:49:0d:69:01:42:3f:17:5e:
42:3e:03:5d:75:d1:dd:11:d1:90:49:50:42:24:86:
6c:38:1f:e3:09:0b:78:78:02:ab:0d:d7:c2:66:eb:
ce:69:b1:1c:c2:9a:8e:3c:ce:a2:b2:b6:1a:ba:61:
f8:49:2f:03:f7:28:2d:33:09:a1:aa:9b:d0:e5:73:
cb:00:92:7e:5d:8a:da:38:0d:c6:12:2d:14:36:d7:
c8:77:99:0b:ed:b0:7a:58:75:6b:f6:77:58:5c:ac:
1c:59:3b:83:ea:28:aa:b3:09:0a:f2:90:90:b5:d5:
14:9e:bb:0c:a0:6c:18:ee:ad:73:5a:68:1c:58:1d:
e4:1b:db:57:a7:14:5c:ee:53:da:dc:48:29:c0:c3:
43:0d:64:70:96:15:74:a7:c3:a1:f9:4e:01:99:31:
0c:32:d8:65:6d:c1:98:0e:ff:37:53:a9:fc:d2:6f:
3d:ef:5c:10:17:5a:09:cf:a3:70:22:09:eb:90:aa:
5b:bc:17:54:84:1e:71:71:8e:09:69:fe:b2:6a:32:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:B9:75:34:28:40:D5:32:05:98:6B:61:1B:69:40:FB:DB:F7:6E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NNW5dTQoQNUyBZhrYRtpQPvb924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.54.0/24
151.242.96.0/24
151.243.107.0-151.243.108.255
151.244.16.0/21
151.244.168.0/23
151.244.216.0-151.244.218.255
151.244.236.0/24
151.244.248.0/23
151.246.48.0/20
151.246.80.0-151.246.119.255
Signature Algorithm: sha256WithRSAEncryption
8d:2c:b5:b6:8b:8b:1e:13:2c:a2:03:f2:fc:7e:ea:a8:85:d5:
a5:c5:e5:46:d3:4c:6a:c7:d0:ad:4e:61:9f:e0:52:0b:12:3c:
20:b5:c0:26:50:b3:b8:0a:52:b9:90:e7:fb:6a:2e:7c:40:85:
e4:e9:68:88:ee:97:c1:6c:76:be:ad:b5:6e:c1:96:8b:8a:40:
df:81:09:0a:16:ed:38:99:2f:e5:ec:91:b9:45:d6:40:44:b0:
86:61:1b:15:72:df:dd:e8:7e:35:4b:bb:20:d7:ab:5c:42:8b:
2c:82:6b:7f:8a:ee:0f:b7:44:d3:d1:05:b7:32:79:8a:ae:e5:
f3:6d:62:e3:af:c4:9c:03:4d:be:38:3d:4a:bd:14:8a:24:8e:
1c:b9:87:e5:a9:e0:04:8e:dc:e9:d1:95:27:bb:c9:c0:40:a1:
ce:d8:bc:d3:97:34:25:ee:59:41:2c:2b:75:c5:82:b8:57:8c:
3a:8b:8e:68:b9:92:6d:f7:8d:8d:0c:15:4b:a0:2e:e4:4a:ce:
ad:fe:67:0d:4f:f8:4a:96:99:28:dc:03:9e:57:53:c4:27:99:
8a:4d:a9:74:ef:cf:aa:71:f1:f8:b7:cf:5a:46:27:3c:42:f9:
7a:6f:df:53:20:5f:19:7b:41:51:78:24:40:a5:8f:a5:4c:1f:
95:52:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:34 2025 by rpki-client